CVE-2026-25414

Incorrect Privilege Assignment vulnerability in iqonicdesign WPBookit Pro wpbookit-pro allows Privilege Escalation.This issue affects WPBookit Pro: from n/a through = 1.6.18...

CVE-2026-24971

Incorrect Privilege Assignment vulnerability in Elated-Themes Search & Go searchgo allows Privilege Escalation.This issue affects Search & Go: from n/a through = 2.8...

CVE-2026-24968

Incorrect Privilege Assignment vulnerability in Xagio SEO Xagio SEO xagio-seo allows Privilege Escalation.This issue affects Xagio SEO: from n/a through = 7.1.0.30...

CVE-2026-24373

Incorrect Privilege Assignment vulnerability in Metagauss RegistrationMagic custom-registration-form-builder-with-submission-manager allows Privilege Escalation.This issue affects RegistrationMagic: from n/a through = 6.0.7.1...

CVE-2026-1712

CVE-2026-1712 describes an incorrect privilege assignment in HYPR Server that enables privilege escalation. The issue affects HYPR Server versions starting at 10.5.1 and prior to 10.7, i.e., 10.5.1 through 10.6.x. The root cause is a faulty privilege allocation mechanism, leading to elevation of ...

CVE-2026-1712

Incorrect privilege assignment vulnerability in HYPR Server allows Privilege Escalation.This issue affects HYPR Server: from 10.5.1 before 10.7...

CVE-2026-1712

Incorrect privilege assignment vulnerability in HYPR Server allows Privilege Escalation.This issue affects HYPR Server: from 10.5.1 before 10.7...

CVE-2026-32530 WordPress Creator LMS plugin <= 1.1.18 - Privilege Escalation vulnerability

Incorrect Privilege Assignment vulnerability in WPFunnels Creator LMS creatorlms allows Privilege Escalation.This issue affects Creator LMS: from n/a through = 1.1.18...

CVE-2026-32530

Incorrect Privilege Assignment vulnerability in WPFunnels Creator LMS creatorlms allows Privilege Escalation.This issue affects Creator LMS: from n/a through = 1.1.18...

CVE-2026-32530 WordPress Creator LMS plugin <= 1.1.18 - Privilege Escalation vulnerability

Incorrect Privilege Assignment vulnerability in WPFunnels Creator LMS creatorlms allows Privilege Escalation.This issue affects Creator LMS: from n/a through = 1.1.18...

CVE-2026-32520 WordPress RewardsWP plugin <= 1.0.4 - Privilege Escalation vulnerability

Incorrect Privilege Assignment vulnerability in Andrew Munro / AffiliateWP RewardsWP rewardswp allows Privilege Escalation.This issue affects RewardsWP: from n/a through = 1.0.4...

CVE-2026-32520

CVE-2026-32520 applies to RewardsWP (RewardsWP plugin for WooCommerce/WordPress) and is an Incorrect Privilege Assignment vulnerability that enables Privilege Escalation. Affected version: RewardsWP rewardswp from unspecified-n/a to

CVE-2026-32520 WordPress RewardsWP plugin <= 1.0.4 - Privilege Escalation vulnerability

Incorrect Privilege Assignment vulnerability in Andrew Munro / AffiliateWP RewardsWP rewardswp allows Privilege Escalation.This issue affects RewardsWP: from n/a through = 1.0.4...

CVE-2026-32519

Incorrect Privilege Assignment vulnerability in Bit Apps Bit SMTP bit-smtp allows Privilege Escalation.This issue affects Bit SMTP: from n/a through = 1.2.2...

CVE-2026-32519

CVE-2026-32519 affects Bit SMTP (WordPress plugin) with versions up to 1.2.2. The vulnerability is described as an Incorrect Privilege Assignment that enables privilege escalation. Public sources in Connected documents note the issue as a missing authorization/privilege control vulnerability, all...

CVE-2026-32488 WordPress User Registration plugin <= 4.4.9 - Privilege Escalation vulnerability

Incorrect Privilege Assignment vulnerability in wpeverest User Registration user-registration allows Privilege Escalation.This issue affects User Registration: from n/a through = 4.4.9...

CVE-2026-32488

CVE-2026-32488 affects the WordPress plugin User Registration (wpeverest) up to version 4.4.9 . The vulnerability arises from an incorrect privilege assignment that enables privilege escalation . Per the entry, the CVSS metrics indicate a Network exploit vector, high attack complexity, no privile...

CVE-2026-27051

CVE-2026-27051: A Privilege Escalation via Incorrect Privilege Assignment in the WordPress theme Golo (uxper)

CVE-2026-27051 WordPress Golo theme <= 1.7.0 - Privilege Escalation vulnerability

Incorrect Privilege Assignment vulnerability in uxper Golo golo allows Privilege Escalation.This issue affects Golo: from n/a through = 1.7.0...

CVE-2026-25414

Affected software: WordPress WPBookit Pro (iqonicdesign) wpbookit-pro, vulnerable through version 1.6.18. Root cause: incorrect privilege assignment enabling privilege escalation. Impact: high confidentiality, integrity, and availability risk (CVE-2026-25414). Exploit status: not specified in the...